A quick note to let you know that as far as we can tell, the site has been restored to normal and you won’t see any more spammy posts.
What happened was a person, script or machine had somehow gotten access to one of the passwords that is associated to an account here that has publishing rights. Posts were getting published through that account, and it took a while to narrow down the problem to that account.
I wouldn’t be surprised if the person or system had just guessed the password to that account because I had kept it ridiculously simple.
The lesson is to make all your passwords complicated, and the way to do that is to use pass-phrases instead of passwords because they are easily remembered and harder to guess or crack. For example: “$DinosaurBirdBrain457#” I believe is easily remembered and harder to crack.
Apologies for the inconvenience and thanks for your patience.